ci: bump the github-actions group with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates: actions/setup-java, docker/setup-qemu-action, docker/setup-buildx-action and docker/bake-action.

Updates actions/setup-java from 6.0.0 to 6.0.1

Release notes

Sourced from actions/setup-java's releases.

v6.0.1

What's Changed

• Fix failing GitHub Actions job for temurin 17 by @​brunoborges with @​Copilot in actions/setup-java#1259
• Fix Temurin EA E2E signature verification by @​brunoborges with @​Copilot in actions/setup-java#1260
• Fix Alpine GPG verification failures and support multiple keys by @​brunoborges in actions/setup-java#1262
• Fix import-safe checks when scripts are run from a path with symlinks by @​otaconix in actions/setup-java#1265
• Avoid macOS GPG socket overflow on long runner paths by @​brunoborges with @​Copilot in actions/setup-java#1266
• Complete v6 release highlights in README by @​brunoborges in actions/setup-java#1254
• Group and slow routine Dependabot updates by @​brunoborges in actions/setup-java#1255
• chore(deps-dev): update eslint and globals by @​dependabot[bot] in actions/setup-java#1256

New Contributors

• @​otaconix made their first contribution in actions/setup-java#1265

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

Commits

• de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
• 134912a Fix import-safe checks when scripts are run from a path with symlinks (#1265)
• 0781fc6 Fix alpine failures by switching default back to only warn on verification fa...
• 4889c4a Fix Temurin EA E2E signature verification (#1260)
• 8fd3240 [WIP] Fix failing GitHub Actions job for temurin 17 (#1259)
• 2732291 chore(deps-dev): update eslint and globals (#1256)
• 1a8f22b chore: streamline Dependabot updates (#1255)
• 85030b7 docs: complete v6 release highlights (#1254)
• See full diff in compare view

Updates docker/setup-qemu-action from 4.2.0 to 4.4.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.4.0

• Use the shared error helper for Docker commands by @​crazy-max in docker/setup-qemu-action#345
• Bump @​docker/actions-toolkit from 0.96.0 to 0.100.0 in docker/setup-qemu-action#344
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-qemu-action#340
• Bump js-yaml from 4.3.1 to 4.3.2 in docker/setup-qemu-action#342
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-qemu-action#337

Full Changelog: docker/setup-qemu-action@v4.3.0...v4.4.0

v4.3.0

• Bump @​docker/actions-toolkit from 0.92.0 to 0.96.0 in docker/setup-qemu-action#336
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-qemu-action#316
• Bump brace-expansion from 1.1.15 to 1.1.18 in docker/setup-qemu-action#332
• Bump js-yaml from 4.2.0 to 4.3.1 in docker/setup-qemu-action#334
• Bump postcss from 8.5.10 to 8.5.25 in docker/setup-qemu-action#331
• Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-qemu-action#317
• Bump undici from 6.27.0 to 6.28.0 in docker/setup-qemu-action#333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

Commits

• 9901266 Merge pull request #342 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2
• 9364d8b Merge pull request #340 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
• 95c3240 Merge pull request #337 from docker/dependabot/npm_and_yarn/postcss-selector-...
• c24671a Merge pull request #338 from docker/dependabot/github_actions/codeql-actions-...
• fa83965 Merge pull request #345 from crazy-max/shared-error-helpers
• f396a65 build(deps): bump the codeql-actions group across 1 directory with 2 updates
• a63df2f chore: update generated content
• 3e4165f use the shared error helper for Docker commands
• 18c52d9 Merge pull request #344 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 896cbed [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.3.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

• Use official Buildx releases for cloud driver by @​crazy-max in docker/setup-buildx-action#606
• Pull BuildKit image before builder creation by @​crazy-max in docker/setup-buildx-action#609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in docker/setup-buildx-action#620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614
• Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

Commits

• f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
• e700274 chore: update generated content
• 3061c91 skip BuildKit image pre-pulls for explicit endpoints
• 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
• bd6e702 chore: update generated content
• 6268c9d pull BuildKit image before builder creation
• e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
• 533ed8e build(deps): bump the codeql-actions group with 2 updates
• bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
• d5079fb chore: update generated content
• Additional commits viewable in compare view

Updates docker/bake-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/bake-action's releases.

v7.4.0

• Use the shared error helper for Buildx commands by @​crazy-max in docker/bake-action#511
• Prevent workflow command injection in metadata logs by @​crazy-max in docker/bake-action#509
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/bake-action#502 docker/bake-action#510 docker/bake-action#513
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/bake-action#498
• Bump brace-expansion from 1.1.13 to 1.1.18 in docker/bake-action#491
• Bump csv-parse from 7.0.0 to 7.0.2 in docker/bake-action#500
• Bump js-yaml from 4.3.0 to 4.3.2 in docker/bake-action#496 docker/bake-action#508
• Bump nanoid from 3.3.16 to 3.3.18 in docker/bake-action#499
• Bump postcss from 8.5.10 to 8.5.25 in docker/bake-action#489
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/bake-action#497
• Bump sigstore from 4.1.0 to 4.1.1 in docker/bake-action#476
• Bump undici from 6.27.0 to 6.28.1 in docker/bake-action#492

Full Changelog: docker/bake-action@v7.3.0...v7.4.0

Commits

• 018cb64 Merge pull request #512 from docker/dependabot/github_actions/codeql-actions-...
• 68e5dfc Merge pull request #513 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 67548ed chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
• ad1760d [dependabot skip] chore: update generated content
• a2262a0 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
• e04a701 Merge pull request #511 from crazy-max/buildx-error-message
• 0b5e3e4 chore: update generated content
• b0aab10 use the shared Buildx error summary helper
• c86773a Merge pull request #510 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 70f5dd8 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions